Ref: SDN Wiki
Author: Sudhakar Mohan

How to create Info Object level( Characteristic Value ) Authorization for a Reporting User in BI 7.0

Scenario: There are 5 sales organizations and we are going to restrict a reporting user ( TEST ) to access only 2 sales organization data out of the 5. In this eg.1000 and 2000 are the sales organizations of the user TEST for which we are going to give access.So whenever the user TEST executes thereport,he will only be able to see the Sales organisations 1000 and 2000 in the report.

Step - 1: Mark the InfoObject Authorization Relevant & Activate it.

Step - 2: Go to Tcode - RSECADMIN
Under Maintenance - Enter the name of the Authorization Object and click Create Authorization.
Insert Sales Organization Info object as shown below. Also included the other SAP recommended objects 1.0TCAACTVT, 2.0TCAIPROV and 3.0TCAVALID.

Maintain the Values for these Objects. Select 0Salesorg and click Details.
Eg: Values 1000 and 2000 are maintained for Sales Organisation

Note : Also include all Authorisation Relevant Objects which are used in that infoprovider in addition to the above additional 3 objects otherwise you may get "No Authorisation" error when you execute the query.

Step - 3 : Tcode - RSU01 Assign User to Authorisation Object
Enter the name of the user to be assigned with the authorization object and click the change button.
The select the relevant authorization object and save.

Note : 0BI_ALL is the authorization object to access all the info objects which are authorization relevant.

Step - 4: Create Authorisation Variable in Query Designer
Create an Authorization Variable - Variable with Processing by Authorisation in Query Designer as Below for Sales Organisation.
Restrict the Sales Organisation with the Authorisation Variable and execute the query.

Ref: SDN Wiki
Author: Ramakrishna Gattikoppula

Scenario
In BW Queries very often there is a requirement to restrict a characteristic with some values to get the correct result. Let us say we have a requirement where we need to restrict the query to only those Departments for which the Department ID starts with D1 or D2. This will be very simple task when there are limited number of Departments IDs starting with D1 or D2, but what if there are many Departments whose ID starts with D1 or D2.

Solution
This Can be achieved using a Customer Exit Variable.

Following are the steps you need to perform to restrict the characteristic with values having certain pattern.

Step1: Create a New Variable(say ZVAR_DEPT) on the Characteristic Department with following properties.

Type of Variable: Characteristic Value.
Processing By: Customer Exit.
Variable Represents: Multiple Single Values.
Variable Entry is: Mandatory, Not Ready for Input and Cannot be changed in Query Navigation

Step 2: Restrict the Characteristic with the variable ZVAR_DEPT.

Step 3: Go to Transaction SE37 and enter "EXIT_SAPLRRS0_001". In the next screen double click on "ZXRSRU01", this will take you to the screen where you can define Customer exit code for Global Variables in Reporting.

Step 4: Include the following code in the Customer Exit code.

WHEN 'ZVAR_DEPT'.
IF I_STEP = 1.
DATA: ITAB1 TYPE STANDARD TABLE OF /BI0/SDEPT_ID WITH HEADER LINE.
SELECT * FROM /BI0/SDEPT_ID INTO TABLE ITAB1 WHERE DEPT_ID LIKE 'D1%' OR DEPT_ID LIKE 'D2%'.
CLEAR: L_S_RANGE.
L_S_RANGE-SIGN = 'I'.
L_S_RANGE-OPT = 'EQ'.
LOOP AT ITAB1.
L_S_RANGE-LOW = ITAB1-DEPT_ID.
APPEND L_S_RANGE TO E_T_RANGE.
ENDLOOP.
CLEAR L_S_RANGE.
ENDIF.